This website and the Stroke Riskometer app are owned and operated by AUT University with trademark registration number 1191892. In this policy, "us", "we" or "our" means AUT University.

This policy addresses the following:

We recommend that you read and understand the Privacy Policy and keep it for future reference.

1. Purpose

1.1 The purpose of this privacy policy is to let users of the Stroke Riskometer App (the “App”) know when we collect personal information and what we do with it. This is a free wellbeing support app that does not ask for any personal information unless you consent to participate in our research. We do not use, share or transfer personal information except as set out in this policy.

2. Personal information

2.1 What is Personal Information?

  1. Personal information is defined under the New Zealand Privacy Act 2020 to mean information about an identifiable individual and includes information relating to a death that is maintained by the Registrar-General pursuant to the Births, Deaths, Marriages, and Relationships Registration Act 1995 or any former Act (as defined by the Births, Deaths, Marriages, and Relationships Registration Act 1995).

3. Collection of your personal information

3.1 We will only collect information that is necessary for us to evaluate your stroke risk after you accept the Disclaimer. Personal information is only collected if you wish to be contacted for the Stroke Riskometer E-Health Research Project (RIBURST) which aims to better understand th risk factors associate with stroke. This study is approved by the AUT University Ethics Committee (Reg #19/236).

3.2 The type of information may include the following:

  1. Age
  2. Sex
  3. Ethnicity
  4. Weight
  5. Height
  6. Smoking status
  7. Alcohol use
  8. Diet (servings of fruit and vegetables)
  9. Level of physical activity
  10. History of significant mental/emotional stress
  11. Family history (parents) of stroke or heart attack
  12. Systolic blood pressure
  13. Use of BP medication
  14. Presence of diabetes
  15. History of heart or peripheral artery disease
  16. History of left ventricular hypertrophy
  17. History of atrial fibrillation
  18. Presence of cognitive problem or dementia;
  19. Presence of poor memory
  20. History of traumatic brain injury
  21. History of stroke or transient ischaemic attack
  22. Your full name (first and last) and e-mail adddress
  23. Alternative contact details (such as the e-mail address of a close family member)

3.3 As far as possible or unless provided otherwise under this privacy policy, we will collect your personal information directly from you. If we collect details about you from someone else, we will, whenever reasonably possible, make you aware that we have done this and the reason for it.

3.4 Depending upon the reason for requiring the information, some non-identifiable information has been identified as mandatory. If you do not provide the mandatory data, we may be unable to provide or effectively provide our services to you. Any personal information (whether mandatory or voluntary) is solely collected if you show interest in our research.

4. Use and disclosure of your personal information

4.1 We will only use or disclose your personal information for the primary purposes for which it was collected or as consented as set out in the Participant Information Sheet and Consent Form.

4.2 We may seek your additional consent to use or disclose your personal information for future research purposes. If you wish to participate in a study, you will need to proceed to the “Research” section of the app, read the Participant Information Sheet and Consent Form, and sign it if you agree.

4.3 The questionnaire responses are stored on a secure server of the Auckland University of Technology (AUT) and reported in a de-identified manner (not linked with your personal data) with all appropriate technical, organisational and contractual safeguards to ensure the protection of your personal data. The data sharing procedure follows the New Zealand Privacy Act 2020 and, the General Data Protection Regulation (if you are in the European Union). A report of the study may be submitted for publication, but individual participants will not be identifiable in such a report.

4.4 If you share your personal details, the team may contact you for future research. However, you can always opt out for any such future communications. If you have received communications which you no longer wish to receive, please contact us at stroke.riskometer@aut.ac.nz and we will ensure that future communications cease.

5. Data quality and security

5.1 We have taken steps to help ensure your personal information is safe. You will appreciate, however, that we cannot guarantee the security of all transmissions or personal information, especially where the Internet is involved.

5.2 The data will be kept in a secure database and the communications between the Stroke Riskometer App and the data collection services will be encrypted. If you participate in the Stroke Riskometer E-health Research Project, your data will be encrypted and kept in a secure database located on the premises of AUT in New Zealand, a country which the European Union Commission has deemed as having an adequate level of data protection. The data will be stored securely and destroyed after 15 years. The data will be preserved by technical, physical and administrative measures from loss, unauthorised access/disclosure or change.

5.3 The data collected as part of the study will be the responsibility of the principal investigator of the study in accordance with the requirements of the New Zealand Privacy Act (2020).

5.4 Notwithstanding the above, we will take reasonable steps to:

  1. Make sure that the personal information we collect, use or disclose is the correct information as submitted by the user
  2. Protect your personal information from misuse, loss, unauthorised access, modification or disclosure both physically and through computer security methods, and
  3. Destroy or permanently de-identify personal information if it is no longer needed for its purpose of collection.

5.5 The accuracy of personal information depends largely on the information you provide to us, so we recommend that you:

  1. Let us know if there are any errors in your personal information, and
  2. Keep us up-to-date with changes to your personal information (such as your name or address).

6. Access to and correction of your personal information

6.1 You are entitled to have access to any personal information relating to you which we possess, except in some exceptional circumstances provided by law. You are also entitled to edit and correct such information if the information is inaccurate, out of date, incomplete, irrelevant or misleading.

6.2 Please feel free to email us at stroke.riskomer@aut.ac.nz if you have any questions regarding data safety, to amend/delete any information shared, or if you wish to restrict how we process your personal information.

7. Consent

7.1 You are agreeing to the terms of this privacy principle by using the App or by accepting the terms and conditions of the Stroke Riskometer E-health Research Project (RIBURST) (which is referred to this privacy policy).

7.2 We reserve the right to modify the privacy policy as our business needs require. We will notify you of such changes (whether by direct communication or by posting a notice on the App), after which your continued use of the App or your continued dealings with us shall be deemed to be your agreement to the modified terms. If you do not agree to our continued use of your personal information due to the changes in our privacy policy, please contact us.

7.3 If you wish to withdraw your consent at any stage, please email stroke.riskometer@aut.ac.nz. You can always decide if you want us to keep or delete any information you already shared after withdrawing from the study.

8. Resolving Privacy Complaints

8.1 We have put in place an effective mechanism and procedure to resolve privacy complaints. We will ensure that all complaints are dealt with in a reasonably appropriate timeframe so that any decision (if any decision is required to be made) is made expeditiously and in a manner that does not compromise the integrity or quality of any such decision.

8.2 If you have any inquiries, concerns or complaints about the manner in which we have collected, used or disclosed and stored your personal information, you can tell us by contacting us.

8.3 In order to resolve a complaint, we:

  1. Will liaise with you to identify and define the nature and cause of the complaint
  2. May request that you provide the details of the complaint in writing
  3. Will keep you informed of the likely time within which we will respond to your complaint and
  4. Will inform you of the legislative basis (if any) of our decision in resolving such complaint

8.4 We will keep a record of the complaint and any action taken in a privacy register.

8.5 Persons can refer their complaint to the Office of the Privacy Commissioner if they are not satisfied with the result of their complaint.

Contact Details for Privacy Officer of AUT University
Dawn Shanta

Phone: +64 9 921 9463